PT-2022-34106 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.16 through 5.10.136 Description: The issue is related to the incorrect clearing of the interrupt status register in RDMA/hns. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2022:3288-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3288-1 advisory. The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following...

PT-2022-33989 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.141 Description: The issue is related to setting the DMA mask for the udmabuf device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34254 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to invalid memory access via node onlineNUMA NO NODE in iommu/vt-d. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

GSD-2022-1005191 iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)

iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

CVE-2021-40019

Out-of-bounds heap read vulnerability in the HWKEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2021-40017

The HWKEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access...

CVE-2021-40017

The HWKEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access...

CVE-2021-40017

The HWKEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access...

CVE-2022-35014

A segmentation fault was found in advancecomp caused by invalid READ memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

CVE-2021-40017

The HWKEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access...

CVE-2021-40017

CVE-2021-40017 affects Huawei HarmonyOS HW_KEYMASTER; lack of key-format validity check can cause out-of-bounds memory access. Documents tie this to HarmonyOS 2.0 and related advisories, with patches referenced in Huawei security bulletins (2022). Exploit details are not provided in the sources; ...

PT-2022-33449 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns invalid memory access via the node onlineNUMA NO NODE function. It was introduced in version v2.6.33 and fixed in version v5.19.2. The actual impact and attack plausibilit...

PT-2022-23043

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1, 2.8.1, and 2.7.2 are also affected Description The GatherNd function in TensorFlow takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater...

Linux kernel vmxgfx_kms.c denial of service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in the GPU component of the Linux kernel, which stems from out-of-bounds OOB memory accesses in the vmwgfx driver in...

Design/Logic Flaw

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system...

Dell BIOS 安全漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which stems from the inclusion of an incorrect null byte neutralization and could be exploited by a locally authenticated administrator...

CVE-2022-36858

A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36862

A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36858

A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...